You maintain a pooled AVD host pool built from a custom image stored in an Azure Compute Gallery. Before applying monthly OS and application updates to the golden image VM, you want a recovery point that lets you quickly redeploy session hosts from the exact pre-update state if the new build causes logon failures in production. Your rollback plan must not require re-capturing or re-generalizing an older VM. Which approach best meets these requirements?